diff --git a/common/securecrt.nix b/common/securecrt.nix
new file mode 100644
index 0000000..edc4aa8
--- /dev/null
+++ b/common/securecrt.nix
@@ -0,0 +1,81 @@
+{
+  lib,
+  stdenv,
+  fetchurl,
+  autoPatchelfHook,
+  dpkg,
+
+  cups,
+  gtkmm3,
+  icu74,
+  krb5,
+  makeWrapper,
+  openssl,
+  pango,
+  python312,
+  xcb-util-cursor,
+  xorg,
+}:
+
+let
+  packageId = "scrt_ubuntu2464_deb_963";
+in stdenv.mkDerivation rec {
+  pname = "securecrt";
+  version = "9.6.3";
+
+  src = fetchurl {
+    url = "https://www.vandyke.com/cgi-bin/download_1.php";
+    name = "${pname}-${version}.deb";
+    curlOpts = "-X POST --data 'pid=${packageId}&export_check=accept&country=no&su";
+    sha256 = "sha256-PsFuxJ7H0rJCWWi+rvzrlRUJlp9R4MG14d883/kl9Lo=";
+  };
+
+  unpackCmd = "dpkg -x $curSrc source";
+
+  nativeBuildInputs = [
+    dpkg
+    autoPatchelfHook
+  ];
+
+  buildInputs = [
+    cups
+    gtkmm3
+    icu74
+    krb5
+    makeWrapper
+    openssl
+    pango
+    python312
+    xcb-util-cursor
+    xorg.xcbutilkeysyms
+    xorg.xcbutilwm
+  ];
+
+  dontConfigure = true;
+  dontBuild = true;
+  dontWrapQTApps = true;
+
+  installPhase = ''
+    runhook preInstall
+
+    mkdir -p "$out"
+    cp -R usr/* "$out/"
+    wrapProgram "$out/bin/SecureCRT" --set QT_QPA_PLATFORM_PLUGIN_PATH "$out/lib/scrt/plugins/platforms"
+
+    runhook postInstall
+  '';
+
+  meta = with lib; {
+    homepage = "https://www.vandyke.com/products/securecrt/unix.html";
+    description = "Terminal emulator for computing professionals, with advanced session management";
+    license = {
+      free = false;
+      fullName = "Unknown / Custom";
+    };
+
+    platforms = with lib.platforms; linux ++ darwin ++ windows;
+    broken = !(stdenv.hostPlatform.isLinux && stdenv.hostPlatform.isx86_64);
+  };
+
+  mainProgram = "SecureCRT";
+}
diff --git a/flake.nix b/flake.nix
index b0aacd3..75165e5 100644
--- a/flake.nix
+++ b/flake.nix
@@ -50,6 +50,7 @@
 
         hyprswitch = hyprswitch.packages.${prev.system}.default;
         pwndbg-gdb-alias = prev.callPackage ./common/pwndbg-gdb-alias.nix { };
+        securecrt = prev.callPackage ./common/securecrt.nix { };
       };
     in
     {
diff --git a/hosts/fa-t14-2025/configuration.nix b/hosts/fa-t14-2025/configuration.nix
index 873f638..cd2a807 100644
--- a/hosts/fa-t14-2025/configuration.nix
+++ b/hosts/fa-t14-2025/configuration.nix
@@ -11,10 +11,6 @@
 
   networking = {
     networkmanager.enable = true;
-    # interfaces.eno1 = {
-    #   useDHCP = true;
-    #   tempAddress = "disabled";
-    # };
 
     tempAddresses = "disabled";
     hostName = "fa-t14-2025";
@@ -44,6 +40,8 @@
   nixpkgs.config = {
     allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
       "copilot.vim"
+      "securecrt"
+      "securefx"
     ];
   };
 
diff --git a/hosts/fa-t14-2025/desktop.nix b/hosts/fa-t14-2025/desktop.nix
index 3770c34..c3063cd 100644
--- a/hosts/fa-t14-2025/desktop.nix
+++ b/hosts/fa-t14-2025/desktop.nix
@@ -47,4 +47,5 @@
   security.polkit.enable = true;
   services.dbus.packages = [ pkgs.gcr ];
   services.openssh.settings.X11Forwarding = true;
+  programs.nm-applet.enable = true;
 }
diff --git a/hosts/fa-t14-2025/home.nix b/hosts/fa-t14-2025/home.nix
index d2dcc10..83b4517 100644
--- a/hosts/fa-t14-2025/home.nix
+++ b/hosts/fa-t14-2025/home.nix
@@ -20,7 +20,10 @@ in {
     mpv
     oauth2ms
     openssl
+    openvpn
+    pavucontrol
     pwgen
+    # securecrt
     traceroute
     virt-manager
     w3m
@@ -71,7 +74,8 @@ in {
     };
     rofi = {
       enable = true;
-      theme = "iggy";
+      # theme = "iggy";
+      theme = "Arc-Dark";
     };
     zsh = {
       shellAliases."rebuild" = "sudo nixos-rebuild switch --flake /config";